
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
File: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft (raw, json)
Hash identifier: OpzGU7DDGXXtVDKoieSb9ROinqnJkxszzj72GaMikj4=
Subject key identifier: 59:01:C5:2C:93:B4:D5:17:79:FF:72:69:57:28:47:4D:76:7D:6B:19
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial: 019EB7A0AD945E6A6F7D23EC008E9A05BC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
Manifest number: 10E9
Signing time: Thu 11 Jun 2026 17:00:21 +0000
Manifest this update: Thu 11 Jun 2026 17:00:21 +0000
Manifest next update: Fri 12 Jun 2026 17:00:21 +0000
Files and hashes: 1: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl (hash: pf2FEh1cV04e95gLu7lSxyqdc8NC97SDF+ZRlMrHinQ=)
2: wflbDoADYAsK4GD1fsBz6TdNDNU.roa (hash: 0r3hdg4G+H0uIyPzUPDcBYqQLBzzIsPKqLy64umuAXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:ad:94:5e:6a:6f:7d:23:ec:00:8e:9a:05:bc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Validity
Not Before: Jun 11 17:00:21 2026 GMT
Not After : Jun 12 17:00:21 2026 GMT
Subject: CN=5901c52c93b4d51779ff72695728474d767d6b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:b8:50:92:9f:f3:6c:43:0f:93:4d:5d:c1:
8f:4f:06:88:fa:dd:85:bb:f2:7d:59:56:de:03:44:
84:c6:3c:64:0e:66:ca:52:c6:3d:e7:aa:17:40:9c:
96:e9:d4:78:2c:c7:c9:d5:5b:d0:44:ac:03:c7:1f:
41:0d:1a:39:bd:20:35:6f:50:86:de:20:24:0a:9d:
16:26:3b:75:c6:30:9b:f5:b5:8f:11:c7:32:08:9a:
53:4d:f6:0b:8b:06:ad:c5:a1:67:88:1d:7f:bf:20:
e7:a1:55:1d:17:d5:4c:e8:ba:8b:e5:6e:83:94:57:
16:6b:5f:28:f9:ae:18:6a:25:dd:96:c2:ec:f1:42:
b6:8a:8a:15:d2:aa:55:bc:5e:f8:1b:b6:53:f8:0e:
bb:f9:91:56:47:1b:e5:f0:f4:59:5a:55:9e:62:77:
6b:b7:f0:72:b5:14:dd:03:b2:fc:ea:bd:fc:a4:f8:
66:1a:52:3b:f6:3c:64:09:9e:e6:85:c7:68:ba:f7:
b2:36:b2:af:1c:e1:19:a4:45:5a:67:fb:5d:eb:90:
b0:61:4b:09:93:5c:c8:69:49:76:1c:8c:6a:30:db:
eb:e8:ad:21:57:c0:93:95:b6:c8:7b:62:e5:23:39:
23:48:48:c8:9d:67:92:a4:05:a4:ca:ca:b0:3d:62:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:01:C5:2C:93:B4:D5:17:79:FF:72:69:57:28:47:4D:76:7D:6B:19
X509v3 Authority Key Identifier:
keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:55:79:76:a9:f3:4a:1d:9e:0b:21:53:1e:fc:7c:75:69:34:
89:4d:d4:69:dc:8d:ad:9e:f5:6e:6e:94:3e:ac:b5:0b:fc:5f:
3b:73:35:18:b8:2a:3b:54:45:f7:24:17:75:78:a6:ea:d8:46:
6d:12:3d:a9:99:81:09:e0:45:58:c5:c5:0f:da:13:0a:bf:18:
47:f4:50:7c:41:93:e1:db:f3:54:1a:df:ba:86:d4:31:62:c8:
fe:14:28:22:0f:c7:0f:cc:4f:e2:92:9e:c6:81:98:10:d6:4f:
a1:5e:2b:97:e4:28:0d:ac:02:5c:99:05:7c:6d:81:6b:7a:10:
f2:fb:eb:c0:d3:f7:9b:8a:3d:10:82:be:ea:5e:78:a3:0f:0e:
cd:7f:41:34:2e:cd:f4:8d:db:ae:ba:b8:f9:9c:eb:3f:7a:cb:
de:cd:fd:d9:17:d4:ef:ec:0b:74:fd:b9:cd:9e:39:1f:8f:8c:
a6:1b:d9:22:30:b9:59:d6:5c:74:8c:b8:db:d6:d4:54:37:b7:
21:6c:ad:fa:35:cb:37:bc:35:3a:51:fc:0d:57:5d:b8:4f:9f:
e5:09:0d:97:6a:76:21:17:08:43:3b:0b:f7:7f:45:04:64:48:
6f:3e:ff:bb:f4:cf:9f:c2:3e:1a:b7:40:fa:19:3c:95:aa:d4:
6b:53:49:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:13:34 2026 by rpki-client